Move Countersignature Authentication with airSlate SignNow

Move countersignature authentication

thanks dan uh so we are going to talk about service authentication and specifically um how to choose whether or not you're going to use tokens or certificates in your authentication real quick who am i like dan said i'm the cto of tremolo security um got 20 years of identity management experience uh big you know fortune 100 companies governments um you know various vendors over the years i've been working with kubernetes since 2016 wrote a lot of documentation around open id connect worked on implementing authentication the dashboard and in most recently in kiali and co-author of kubernetes and docker and enterprise guide so enough about me uh so when we're talking about whether or not we're going to use tokens or certificates inside or to authenticate your services start by asking yourself a few questions you know first off does your service use end user data some services are service to service some services are used by end user applications and a lot of that will dictate uh the easiest way to go for authentication um how much is automated uh if you're not automating at least something then you should probably take a step back and think about how you would automate it because trying to do this stuff manually is going to get you into a lot of trouble how complex is the network a lot of times when we start talking about certificate authentication versus token authentication a big thing to think about is how close is your authentication point for the certificate to the actual system that it's protecting and then finally how does a transaction span multiple service calls you know most complex services are more than one call you're not just gonna say okay call this one service get your answer back you're done often you'll call one service they'll call two other services to get the job done does the transaction span that do you have to be able to get user context across those services that makes a big impact on which way you decide to do your service authentication uh so this slide's really the biggest slide i'm actually gonna see if i can get rid of the make it a little easier for me um no no maybe not oh am i still sharing i am not shoot try that again all right cool um so uh this particular side is really the one that you want to pay the most attention to it it brings together a lot of the information on comparing and contrasting certificates and um uh tokens when we're talking about uh certificates you know the big strength of the certificate is you have no secret going over the wire very very secure when you do it correctly um you know a big benefit there is the fact that uh you're you're you know you're generating your private key you're generating certificates getting trusted your your service doesn't need to know anything...